logo

Database

Server side cross-site scripting In markdown2

Description

Cross-site scripting in markdown2 for python python-markdown2 before 1.0.1.14 has multiple cross-site scripting (XSS) issues.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2009-37242. NVD-2009-37243. OSV-2009-37244. GHSA-72cx-5ff9-4hhc5. GCVE-2009-3724

References

1. https://github.com/pypa/advisory-database/tree/main/vulns/markdown2/PYSEC-2020-235.yaml2. https://www.openwall.com/lists/oss-security/2009/10/29/53. https://code.google.com/p/python-markdown2/issues/detail?id=294. https://code.google.com/p/python-markdown2/issues/detail?id=30

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.